Privacy policy

This is the privacy policy for the Pick For Two service. It explains what we store, why, and the choices you have. We keep data collection to the minimum needed to run the app. Last updated: 4 July 2026.

What we store

• Account: your email address, display name, and a salted hash of your password (never the password itself). Your email is used to sign you in, verify your address, and let you reset your password. Your email address and display name are stored encrypted.
• Your decks and products: the product links you add and the details we look up for them (title, price, images).
• Photos you upload: pictures you add to your own decks are stored on our servers in the EU. Location data (EXIF) is stripped on upload. Photos are deleted from our storage when you remove the item, delete the deck, or delete your account.
• Your votes: the like/skip and star choices you make.
• Technical: a session cookie to keep you logged in, and basic request rate-limiting to prevent abuse.
• Billing: if you subscribe or buy a pack, we store your plan, your subscription status, and an identifier from our payment provider. We do not store your card details.
• Referrals: if you refer a friend or join via a referral link, we store who referred whom and, to prevent reward fraud, limited signals: the IP address at signup and a non-reversible code derived from the email (we do not store the address itself). Lawful basis: our legitimate interest in preventing abuse. These fraud signals are removed after 30 days, or, if a signup was flagged for manual review, once that review is resolved.

Payments

Payments are processed by Paddle.com, our reseller and Merchant of Record, who acts as the data controller for payment and card data and handles invoicing and tax. See Paddle's privacy notice for how they process that data. We only receive your plan/status and a provider reference, never your card number.

Service providers

We use a small number of providers to run the service, under agreements that limit what they may do with the data:

• Anthropic reads the links you add and the prompts you type, to build your cards and AI decks.
• Brevo (EU) delivers our email, such as verification and password-reset messages.
• Hetzner (Germany) hosts the service; your data is stored in the EU.
• Pexels provides stock photos for deck items; we send it search terms, never your account data.
• Cloudflare manages our domain and routes email sent to our support address.

Why we store it

Only to provide the service: signing you in, showing your decks, matching your choices with the other person, and keeping the app secure. We do not sell your data and we do not run advertising.

Security

All traffic to the service is encrypted in transit. Personal details are also encrypted where they are stored: your email address, your display name, the prompts you type for AI decks, and the notifications we receive from our payment provider. Passwords are stored only as salted hashes, and our database backups are encrypted too.

Your rights

• Access and correction: your data is visible in the app, and you can edit your display name and password on the Account page.
• Erasure: you can permanently delete your account and its data at any time from the Account page. Deletion removes your account, the decks you own, their products, your uploaded photos, your votes, and the prompts you typed for AI decks, and cannot be undone. A few records survive in reduced form: a minimal, non-identifying referral record where needed to prevent reward fraud and to honor a bonus already given to the person you referred; de-identified AI usage records (counts and costs, with the link to your account removed and no prompt text); and billing and transaction records we are legally required to keep for tax and accounting.

Retention

We keep your data while your account exists. When you delete your account, the data above is removed, apart from the records listed under Erasure. Raw payment notifications are removed after 90 days; we keep only the minimal transaction references needed for accounting and refunds. Anonymous product-classification signals (a labelled URL with no link to you) may be retained to improve our link analysis.

Contact

To exercise your rights or ask a question, use the in-app account controls or email support@pickfortwo.com.